Red Hat Security Advisory

RHSA-2025:13622

Red Hat OpenShift distributed tracing platform (Jaeger) 3.5.2 release

Released 2025-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.5.3 registry.redhat.io/rhosdt/jaeger-agent-rhel8, registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8, registry.redhat.io/rhosdt/jaeger-collector-rhel8 +6

TI-2025-06766 CVE-2025-7425 · GHSA-8c4w-j52q-j4jq

HIGH 69

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.

CVSS 3.1HIGH 7.8 Local No auth No interaction EPSS 0.00444 Published 2025-07-10 Partial fix · 2.15.2, 1.1.39-8.el10_0 +42 CWE-416

TI-2025-23491 CVE-2025-32415 · GHSA-w8fw-fj9q-vcjj

HIGH 66

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0059 Published 2025-04-17 Partial fix · 2.13.8, 2.14.2 CWE-1284

TI-2025-07372 CVE-2025-8058 · GHSA-8xjp-c72j-67q8

LOW 26

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails.

CVSS 4.0MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00223 Published 2025-07-23 Partial fix · 2.42 CWE-415